$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json) Hash identifier: 7bMUt+mhywKykCUqdQdUIYX5fl332dSdL3XSaUXhYBk= Subject key identifier: 6E:D3:6F:42:97:09:BA:F2:B9:E4:86:93:D4:AD:8A:E7:C2:16:0E:45 Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft Manifest number: 0480 Signing time: Fri 22 Nov 2024 23:37:23 +0000 Manifest this update: Fri 22 Nov 2024 23:37:22 +0000 Manifest next update: Fri 29 Nov 2024 23:37:22 +0000 Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: bi605st4rrCGijVYUOb/1z4Hzf20pUyMDKLG2VLa4mw=) 2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: vx8I2rAt4ngN3ULXvENDY57ElXBQm5UO3w1gKIgmYDM=) 3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: lO67gx11y7LRP3TT7EpxGiQlsSTO09ZeqHZQUPRePIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Validity Not Before: Nov 22 23:37:22 2024 GMT Not After : Nov 29 23:37:22 2024 GMT Subject: CN=674115b2-fd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:a1:2f:18:aa:69:00:f9:6c:3f:ac:59:7c: 82:35:4f:46:48:7d:5f:93:fc:f4:29:0d:22:d9:bf: 71:bd:6e:0e:10:e9:f0:af:44:c1:2b:0c:c3:55:0a: ba:97:98:cd:4b:a3:d4:1e:f7:42:fa:99:49:3d:77: a0:ea:8c:ee:98:45:aa:8a:c6:7c:0d:aa:82:40:d8: d2:8f:17:77:99:d0:bc:de:2b:44:e0:86:54:52:a5: c5:30:00:17:d5:36:92:6a:68:ae:63:d7:b9:58:00: 3a:9f:8e:5b:e7:f9:1b:c1:fb:75:2c:9e:92:48:ae: 50:91:75:5f:2e:96:7f:8a:3b:18:82:b3:2f:30:45: 9a:63:f0:1b:fc:22:ff:c8:0c:e2:7a:49:27:e5:85: 57:e6:78:1b:a5:21:28:10:4a:ae:be:9e:65:d8:9e: 84:80:9d:da:16:89:e2:7b:d0:e6:2e:cc:0d:79:12: 7b:fa:38:17:0b:4c:be:c0:dc:2d:f2:5e:4e:38:69: c0:bc:a0:1f:a3:a2:f5:9d:ae:5a:f9:d6:01:6c:ac: c0:b0:3d:3b:f0:16:26:e7:10:5b:dc:ad:8a:bc:14: 09:f0:25:ed:c3:f4:65:db:2f:51:ef:33:bd:62:92: a6:70:4f:5f:cc:e4:43:c0:1d:f1:48:fd:94:bb:49: c1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D3:6F:42:97:09:BA:F2:B9:E4:86:93:D4:AD:8A:E7:C2:16:0E:45 X509v3 Authority Key Identifier: keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:97:9a:ba:1b:95:25:16:92:f2:8c:71:81:69:dc:44:58:ee: 5e:33:bc:8a:82:ba:e3:d9:34:54:69:fc:14:a3:a0:a5:0d:28: c3:09:d5:0b:09:09:d1:77:42:1d:8a:a5:f1:09:ee:4e:85:f5: 33:2d:83:12:55:be:db:c1:b8:40:04:94:52:cb:72:f4:16:7e: 1a:6e:58:cd:1f:f0:ce:ba:79:c3:f8:e0:5f:1d:8c:75:f3:ea: b8:cc:e6:6b:52:d7:94:91:cc:c3:86:d3:fc:cf:c0:a2:33:68: 16:f9:4b:cb:d1:83:db:16:ce:9e:77:1c:f1:94:a7:2b:a3:36: 8d:a3:17:79:4f:5c:65:9b:eb:f1:3c:b5:35:82:da:3e:07:97: 6e:c4:79:03:30:f4:a1:4d:6b:d7:e1:11:18:11:e5:cf:f8:32: cc:85:14:07:e2:a0:76:cb:8c:fe:30:0b:aa:4e:19:f9:e5:a5: 61:5f:cb:29:de:4e:71:5a:6a:70:d7:95:78:dc:aa:76:64:8a: 8f:96:00:2c:c8:7a:ab:44:1d:e3:20:4f:66:fa:45:bd:62:ec: 68:f3:c4:5c:b9:2d:2e:86:67:48:7c:6f:f0:fe:98:90:cd:34: 35:6a:6d:fa:29:1c:f0:ca:88:3e:44:02:36:a7:f6:0d:b0:1e: 60:9b:17:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzRkUxMTAvBgNVBAUTKEExNENBMDc4Qzg1RTQ2NTM1RDkyMDQzODJCODQ5NzRG MTNCMEM5M0MwHhcNMjQxMTIyMjMzNzIyWhcNMjQxMTI5MjMzNzIyWjAYMRYwFAYD VQQDEw02NzQxMTViMi1mZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJChLxiqaQD5bD+sWXyCNU9GSH1fk/z0KQ0i2b9xvW4OEOnwr0TBKwzDVQq6 l5jNS6PUHvdC+plJPXeg6ozumEWqisZ8DaqCQNjSjxd3mdC83itE4IZUUqXFMAAX 1TaSamiuY9e5WAA6n45b5/kbwft1LJ6SSK5QkXVfLpZ/ijsYgrMvMEWaY/Ab/CL/ yAziekkn5YVX5ngbpSEoEEquvp5l2J6EgJ3aFonie9DmLswNeRJ7+jgXC0y+wNwt 8l5OOGnAvKAfo6L1na5a+dYBbKzAsD078BYm5xBb3K2KvBQJ8CXtw/Rl2y9R7zO9 YpKmcE9fzORDwB3xSP2Uu0nBxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7Tb0KX CbryueSGk9StiufCFg5FMB8GA1UdIwQYMBaAFKFMoHjIXkZTXZIEOCuEl08TsMk8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODNGRS8zMjk1RjkwMjFE QjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJsTmRrZ1E0SzRTWFR4T3d5 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VeWdlTWhlUmxOZGtnUTRLNFNYVHhPd3lUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODNGRS8zMjk1RjkwMjFEQjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJs TmRrZ1E0SzRTWFR4T3d5VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGl5q6G5UlFpLyjHGBadxEWO5eM7yKgrrj2TRUafwUo6ClDSjDCdUL CQnRd0IdiqXxCe5OhfUzLYMSVb7bwbhABJRSy3L0Fn4abljNH/DOunnD+OBfHYx1 8+q4zOZrUteUkczDhtP8z8CiM2gW+UvL0YPbFs6edxzxlKcrozaNoxd5T1xlm+vx PLU1gto+B5duxHkDMPShTWvX4REYEeXP+DLMhRQH4qB2y4z+MAuqThn55aVhX8sp 3k5xWmpw15V43Kp2ZIqPlgAsyHqrRB3jIE9m+kW9Yuxo88RcuS0uhmdIfG/w/piQ zTQ1am36KRzwyog+RAI2p/YNsB5gmxfC -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org